Admin Other

Category Activity

trying to find if there is an suggestion to capture only the values that occurs in more than one event with a different value Hi Team, I would like to know if there is any way to extract/find only the values that is present in more than one e... by Deepz2612 Explorer in Knowledge Management 10-25-2019 0 5	0	5
Example of inactive account activity detected use case? Does anyone have examples of how to use Splunk to check for inactive account activity? by adukes_splunk Splunk Employee in Security 10-25-2019 0 2	0	2
Example of a high volume email activity to non-corporate domains by a user use case? Does anyone have examples of how to use Splunk to check for volume email activity to non-corporate domains? by adukes_splunk Splunk Employee in Security 10-25-2019 0 2	0	2
Example of a batch file write to system32 use case? Does anyone have examples of how to use Splunk to check for batch files written to the Windows system directory? by adukes_splunk Splunk Employee in Security 10-25-2019 0 2	0	2
Example of activity from an expired user? Does anyone have examples of how to use Splunk to check for activity from expired users? by adukes_splunk Splunk Employee in Security 10-25-2019 0 2	0	2
Help with ML finding RCA from dimensions Hello, first steps with ML, appreciate guidance on which ML method to use to get started. We have a set of metrics m... by kuzkuz Explorer in Knowledge Management 10-25-2019 0 1	0	1
Eventtype are broken in Splunk 8.0.0 I have several eventtypes that are extracted in various apps. This stopped working after I upgraded to 8.0.0 Its no... by lakromani Builder in Knowledge Management 10-25-2019 0 6	0	6
NPM Run Build issue on MAC Hi Team, Here is the error log that am getting while trying to build the app, i have seen few recommendation to use ... by kondrusiva3 New Member in Installation 10-24-2019 0 0	0	0
Recover Splunk certifies with the number Is it possible to retrieve a certificate donde in the past? I have a certification as Power User and also as Splunk A... by Carlosbbm New Member in Security 10-24-2019 0 2	0	2
Example of new users taking privileged actions? Does anyone have examples of how to use Splunk to check for new users taking privileged actions? by adukes_splunk Splunk Employee in Security 10-24-2019 0 2	0	2
Example of a prohibited process detected use case? Does anyone have examples of how to use Splunk to check for a prohibited process? by adukes_splunk Splunk Employee in Security 10-24-2019 0 2	0	2
Splunk SDK user access permissions required I've had a couple of python scripts that use the sdk to pull search results running for a couple of years. This week... by reswob4 Builder in Security 10-24-2019 0 0	0	0
Custom authentication.conf for Search Head Cluster Hi, Version - Splunk v7.1.0 Component - Search Head Cluster Background - in our organization, we are using Splunk I... by dustymehul Explorer in Security 10-24-2019 0 1	0	1
Can you track special licenses usage? Hi all, is there a chance to track usage of "special licenses" (like the one for PCI App or ITSI) in a distributed la... by christian_l Path Finder in Installation 10-23-2019 1 1	1	1
Make logs CIM compatible - Malware in Splunk ES Hi All, I am using Sophos AV in my environment and it produces the logs in JSON format. I want to see them in malwa... by tbavarva Path Finder in Knowledge Management 10-23-2019 0 1	0	1
ERROR [Errno 111] Connection refused while sending mail to: We are running splunk 4.2.3 on RHEL 5.I am scheduling a job in windows app and email the results to my email id but i... by npandith Explorer in Security 10-23-2019 1 3	1	3
Splunk User Role: How to choose a particular app as default when I login? I logged in to Splunk web URL and i see many Apps , how can i make one app as default so when i login I don't need to... by vijaychandra24 New Member in Security 10-22-2019 0 2	0	2
'Configure Splunk forwarding to use your own certificates' possible documentation error Hi, I'm trying to configure Splunk forwarders and indexers to use our own certificates and while checking the docume... by jorcabro Explorer in Security 10-22-2019 1 2	1	2
Summary Index Not Updating I'm trying to debug issues with a scheduled search that writes to the summary index and the backfill script. My assu... by srussellnpr Explorer in Knowledge Management 10-22-2019 0 6	0	6
What are knowledge objects, and what do I need to know about them? What are knowledge objects, what do they do, and what do I need to know about them? by jmulcaster_splu Splunk Employee in Knowledge Management 10-21-2019 0 2	0	2
Specific Wineventlog (Security) ingestion into Splunk Hi Team, Currently we are ingesting all data from wineventlog Security, Application & System from all Windows Client... by anandhalagarasa Path Finder in Security 10-21-2019 1 2	1	2
How to migrate Splunk enterprise to new hardware Is anyone here can share the best practice on how to migrate Splunk enterprise to new hardware? my system include:2 d... by vnguyen46 Contributor in Installation 10-18-2019 0 9	0	9
where do I find this file for my mac splunk enterprise 7.1.2: Configure the /opt/splunk/apps/search/local/props.conf file I need to update the file with this: with the following content which will configure messages received from the OCP s... by irazabal123 New Member in Installation 10-18-2019 0 5	0	5
Monitor Role Changes in _Audit Trail Audit:[timestamp=10-29-2017 15:55:70.674, user=bob@bob.com, action=edit_user, info=granted object="jerry@jerry.com" o... by lathwal Engager in Security 10-17-2019 4 2	4	2
Where is there documentation for the "Summarization Period" of Splunk data models? Greetings fellow Splunkers, Our client wants dashboards, reports, and alerts that provide comprehensive statistics i... by jacobpevans Motivator in Knowledge Management 10-17-2019 0 4	0	4